SECURITY MANAGEMENT SYSTEM AND ITS CONTROL METHOD

摘要

PROBLEM TO BE SOLVED: To provide an information system capable of automatically regulating the operation of a client device and automatically canceling the operation regulations according to each user's level of understanding and skill. SOLUTION: A server is provided with: a utilization log collecting means for collecting the utilization logs of the client device; an inappropriate utilization log creating part which compares the collected utilization logs with security policies to extract and record noncomliant operations; a regulation issuing part which sends utilization regulation instructions to the client devices corresponding to the noncompliant operations; an automatic question generating part which generates questions corresponding to the utilization regulation instructions; and an answer urging part which sends a message to urge the users to answer the questions. The client device is provided with a regulation control part which restricts the utilization of one's own device according to the utilization regulation instructions, and an access regulating part which receives the utilization regulation instructions sent from the server and transmits them to the regulation control part. COPYRIGHT: (C)2005,JPO&NCIPI